Skip to content

IDV Platform RBAC Groups

The IDV Platform RBAC system supports both predefined and custom groups.

Default Groups

IDV Platform provides a system All Users group with no assigned roles and a set of default role groups, each associated with a corresponding default role.

Default group Default role
All Users None
Admin Admin
Super User Super User
Tech Admin Tech Admin
Business Flow Admin Business Flow Admin
Demo Demo
Auditor Auditor
Operator Operator
Compliance Manager Compliance Manager

The default Admin account created during the initial IDV Platform setup is automatically added to both the All Users group and the Admin role group, inheriting the built-in Admin role through its membership in the latter.

Other newly created users automatically join the All Users group but have no access to IDV Platform functional areas until added to a group with assigned roles.

Restrictions

You cannot:

  • Rename or delete a default group.
  • Modify or remove the assigned built-in role.
  • Add other roles to a default group.
  • Remove the last active user with the built-in Admin role from the Admin group.

For general rules governing group membership, role assignments, and permission inheritance, see RBAC General Rules and Constraints.

For related restrictions on default roles, see General Rules and Constraints for Default Roles.

Custom Groups

You can create custom groups to organize users into teams and assign roles based on your organization's access requirements.

For instructions on creating and managing groups, see Manage Groups.

Group-Level Access Control

The RBAC system allows you to restrict access to specific groups by their entity IDs or grant access to all groups using the wildcard *. This helps departments or branches operate within the same platform without accessing unauthorized groups.

For more information about Entity-level permissions, see Entity-Level Access Control.

Next Step

Learn how to set up role-based access in How to Configure Access in IDV Platform.